ad

Signed-off-by: Ramkumar Chinchani <[email protected]>
project-stacker · Mar 14, 2024 · d537eb3 · d537eb3
1 parent fd339b2
commit d537eb3
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pkg/stacker/referrer.go b/pkg/stacker/referrer.go
@@ -397,6 +397,12 @@ func getArtifact(path, mtype, aUrl, username, password string, skipTLS bool) err
 		return err
 	}
 
+	if (manifest.Config.MediaType != ispec.DescriptorEmptyJSON.MediaType) ||
+		(manifest.Config.Digest != ispec.DescriptorEmptyJSON.Digest) {
+		log.Errorf("invalid artifact descriptor for %s", sdgst.String())
+		return errors.Errorf("invalid artifact descriptor for %s", sdgst.String())
+	}
+
 	// create a tempfile
 	fh, err := os.CreateTemp(path, "*.json")
 	if err != nil {